Re: [OE-core] [PATCH] defaultsetup.conf: Enable security flags+pie by default

2018-08-02 Thread Khem Raj
ts.openembedded.org > > > > > core-boun...@lists.openembedded.org> On Behalf Of Khem Raj > > > > Sent: den 24 juli 2018 16:12 > > > > To: ChenQi > > > > Cc: Patches and discussions about the oe-core layer > > > c...@lists.openembedde

Re: [OE-core] [PATCH] defaultsetup.conf: Enable security flags+pie by default

2018-07-31 Thread Peter Kjellerstedt
> -Original Message- > From: Khem Raj > Sent: den 27 juli 2018 23:27 > To: Peter Kjellerstedt > Cc: ChenQi ; Patches and discussions about the > oe-core layer > Subject: Re: [OE-core] [PATCH] defaultsetup.conf: Enable security > flags+pie by default > > O

Re: [OE-core] [PATCH] defaultsetup.conf: Enable security flags+pie by default

2018-07-27 Thread Khem Raj
> > Cc: Patches and discussions about the oe-core layer > c...@lists.openembedded.org> > > Subject: Re: [OE-core] [PATCH] defaultsetup.conf: Enable security > > flags+pie by default > > > > On Tue, Jul 24, 2018 at 12:30 AM ChenQi wrote: > > > > > &g

Re: [OE-core] [PATCH] defaultsetup.conf: Enable security flags+pie by default

2018-07-27 Thread Andre McCurdy
c: Patches and discussions about the oe-core layer > c...@lists.openembedded.org> >> Subject: Re: [OE-core] [PATCH] defaultsetup.conf: Enable security >> flags+pie by default >> >> On Tue, Jul 24, 2018 at 12:30 AM ChenQi wrote: >> > >> > Hi Khem,

Re: [OE-core] [PATCH] defaultsetup.conf: Enable security flags+pie by default

2018-07-27 Thread Peter Kjellerstedt
t; Subject: Re: [OE-core] [PATCH] defaultsetup.conf: Enable security > flags+pie by default > > On Tue, Jul 24, 2018 at 12:30 AM ChenQi wrote: > > > > Hi Khem, > > > > The comments in security-flags.inc also needs to be modified to > remove > > 'po

Re: [OE-core] [PATCH] defaultsetup.conf: Enable security flags+pie by default

2018-07-24 Thread Khem Raj
On Mon, Jul 23, 2018 at 11:42 PM Anuj Mittal wrote: > > On 07/24/2018 03:09 AM, Khem Raj wrote: > > This has been an opt-in for so long, some distributions e.g. > > poky-lsb uses it by default however, since most of linux > > distros have started to default to these settings for security > > enhan

Re: [OE-core] [PATCH] defaultsetup.conf: Enable security flags+pie by default

2018-07-24 Thread Khem Raj
On Tue, Jul 24, 2018 at 12:30 AM ChenQi wrote: > > Hi Khem, > > The comments in security-flags.inc also needs to be modified to remove > 'poky-lsb' info. > > I'd suggest we still put it into distro conf file (poky.conf) instead of > defaultsetup.conf, because defaultsetup.conf is included by > bit

Re: [OE-core] [PATCH] defaultsetup.conf: Enable security flags+pie by default

2018-07-24 Thread ChenQi
Hi Khem, The comments in security-flags.inc also needs to be modified to remove 'poky-lsb' info. I'd suggest we still put it into distro conf file (poky.conf) instead of defaultsetup.conf, because defaultsetup.conf is included by bitbake.conf. I think things in defaultsetup.conf should be ne

Re: [OE-core] [PATCH] defaultsetup.conf: Enable security flags+pie by default

2018-07-23 Thread Anuj Mittal
On 07/24/2018 03:09 AM, Khem Raj wrote: > This has been an opt-in for so long, some distributions e.g. > poky-lsb uses it by default however, since most of linux > distros have started to default to these settings for security > enhancements, time has come for OE to make it default too Should be r

[OE-core] [PATCH] defaultsetup.conf: Enable security flags+pie by default

2018-07-23 Thread Khem Raj
This has been an opt-in for so long, some distributions e.g. poky-lsb uses it by default however, since most of linux distros have started to default to these settings for security enhancements, time has come for OE to make it default too Signed-off-by: Khem Raj --- meta/conf/distro/defaultsetup